Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1990251

Summary: [Docs][Install Guide] Add topic for enabling DISA-STIG profile for RHEL hosts
Product: Red Hat Enterprise Virtualization Manager Reporter: Steve Goodman <sgoodman>
Component: DocumentationAssignee: Steve Goodman <sgoodman>
Status: CLOSED CURRENTRELEASE QA Contact: rhev-docs <rhev-docs>
Severity: unspecified Docs Contact:
Priority: high    
Version: 4.4.5CC: arachman, cshao, lsurette, lsvaty, lveyde, mavital, mhicks, mkalinin, peyu, sbonazzo, shlei, srevivo, weiwang, yaniwang
Target Milestone: ovirt-4.4.8Keywords: Documentation, NoDocsQEReview, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-08-05 09:31:09 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Integration RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Steve Goodman 2021-08-05 06:53:51 UTC
This bug was initially created as a copy of Bug #1964691

I am copying this bug because: Bug #1964691 related only to RHVH. While working on that bug we realized that it might be possible to concisely document how to enable RHEL hosts based on the .yaml file that is used to enable the DISA STIG profile during the self-hosted engine deployment.

---- Description of Bug #1964691 ----

In RHV 4.3 we have announced the support of DISA-STIG profile availability for RHV Deployments:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/installing_red_hat_virtualization_as_a_standalone_manager_with_local_databases/index#disa-stig-for-red-hat-linux-7-assembly-securing-rhv

With the migration to RHEL8, this does not work anymore on RHV 4.4 and that's why it is a regression for the customers that used this functionality or plan to use it on RHV 4.4.

This might be a test only bz + documentation to follow, maybe more then just test only.
I see today these 2 related BZs that may mean this is a test only BZ:
Bug#1930550 - RHVH upgrade failed via engine with STIG profile selected
Bug#1950239 - Failed to authenticate ssh session with host during hosted engine deployment with STIG profile

Comment 1 Steve Goodman 2021-08-05 08:25:54 UTC
Asaf, the merge request for the new topic "Applying the DISA STIG profile in a Red Hat Enterprise Linux Host" is here:

https://gitlab.cee.redhat.com/rhci-documentation/docs-Red_Hat_Enterprise_Virtualization/-/merge_requests/2033

Comment 2 Steve Goodman 2021-08-05 09:29:53 UTC
After opening this, Asaf found that the DISA STIG policy is already part of the normal RHEL Anaconda installer.

So I just added a link to the relevant RHEL doc and merged this.